About
About CyberAlert.io
Threat intelligence for SOC analysts and CISOs: the vulnerabilities, exploits and events that matter, without the noise.
What we do
CyberAlert.io tracks the vulnerabilities defenders have to act on. Every high and critical CVE, and every vulnerability CISA lists as exploited in the wild, gets its own page within about 30 minutes of being published, with its score, the chance it will be exploited, the affected product and what to do about it.
Alongside the CVE feed we map the cybersecurity conferences worth attending, list security vendors by what they do, and run a short news desk on the stories that matter that day.
Where the data comes from
- NVD, the US National Vulnerability Database: CVE descriptions, CVSS scores and references.
- CISA KEV, the Known Exploited Vulnerabilities catalog: which flaws attackers are using, and the US federal patch deadlines.
- FIRST EPSS: the chance a vulnerability is exploited in the next 30 days.
- CVE.org: product names where NVD has none yet.
- Official event websites: conference dates, venues and sponsors, checked by hand.
- Security newsrooms and government advisories: the reports behind each news story, linked on the story.
How we work
CVE pages are built automatically from these sources and change when they do. Event details are checked by hand against each organizer's own site. News stories are drafted with Claude, an AI model made by Anthropic, from what each outlet publishes in its news feed and from our own CVE data. An editor reads every draft before it goes live, and every story links to the reports it is based on. We never republish other outlets' articles.
A company listed on the Vendors page is not our partner, and a listing is not an endorsement.
Who runs it
CyberAlert.io is run by Jovan Stojanović in Belgrade, Serbia. Spotted a mistake, or have a tip? Write to us: every message is read by a person.